package.json

Add24.svg

Add32.svg

AddBox24.svg

AddBox32.svg

AddUser24.svg

AddUser32.svg

Alert24.svg

Alert32.svg

AmexCard16.svg

Anticipation24.svg

Anticipation32.svg

ArrowBack24.svg

ArrowBack32.svg

ArrowDown24.svg

ArrowDown32.svg

ArrowForward24.svg

ArrowForward32.svg

ArrowUp24.svg

ArrowUp32.svg

Balance24.svg

Balance32.svg

BankAccount24.svg

BankAccount32.svg

BarCode24.svg

BarCode32.svg

Calendar24.svg

Calendar32.svg

Camera24.svg

Camera32.svg

Card24.svg

Card32.svg

ChartBars24.svg

ChartBars32.svg

ChartBarsRising24.svg

ChartBarsRising32.svg

ChartPie24.svg

ChartPie32.svg

Check24.svg

Check32.svg

CheckBox24.svg

CheckBox32.svg

Checkout24.svg

Checkout32.svg

ChevronBack24.svg

ChevronBack32.svg

ChevronDown24.svg

ChevronDown32.svg

ChevronForward24.svg

ChevronForward32.svg

ChevronUp24.svg

ChevronUp32.svg

ClearClose24.svg

ClearClose32.svg

Clock24.svg

Clock32.svg

Configuration24.svg

Configuration32.svg

Copy24.svg

Copy32.svg

Costumer24.svg

Costumer32.svg

DinersCard16.svg

DiscoverCard16.svg

Download24.svg

Download32.svg

Edit24.svg

Edit32.svg

EditBox24.svg

EditBox32.svg

EloCard16.svg

Extract24.svg

Extract32.svg

Facebook20.svg

Favorite24.svg

Favorite32.svg

Feedback24.svg

Filter24.svg

Filter32.svg

Flag24.svg

Flag32.svg

Folder24.svg

Folder32.svg

Github20.svg

HeartRate24.svg

HeartRate32.svg

Help24.svg

Help32.svg

Hide24.svg

Hide32.svg

HiperCard16.svg

Home24.svg

Home32.svg

Info24.svg

Info32.svg

JCBCard16.svg

Like24.svg

Like32.svg

Link20.svg

A set of pixel-perfect icons tailored for the web. 

Socket Acquires Coana to Bring Reachability Analysis to Every Appsec Team

emblematic-icons

A set of pixel-perfect icons tailored for the web

zignd

uselessdev

lucianopf

marquinhoalm

matheusvellone

pagarme-opensource

rsmelo

deivis

lucasjs

priscilaprudente

magnomoreira

gabrielpagarme

carolinaaguelera

prifight

ander_souza

karinealcantara

rpsantos1987

joaovjs-pagarme

danielponde

jonasnt17

bruno.mduarte

nathaliacrelier

mjtom

fgurian

julianasobreira

latorre20

itsdaiego

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

What is an empty package?

Empty package

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

What is environment variable access?

Environment variable access

(Experimental) Something was found which is explicitly marked as unlicensed.

Explicitly Unlicensed Item

Package optionally loads a dependency which is not specified within any of the package.json dependency fields. It may inadvertently be importing dependencies specified by other packages.

What are extraneous dependencies?

Name

Extraneous dependency

Contains a dependency which resolves to a file. This can obfuscate analysis and serves no useful purpose.

What are file dependencies?

File dependency

Accesses the file system, and could potentially read sensitive data.

What is filesystem access?

Filesystem access

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

What are wildcard dependencies?

Wildcard dependency

emblematic-icons - npm Package File explorer